Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/KYHWuWkD7uOvsJFLDgyQXnR9S_U.roa
File: KYHWuWkD7uOvsJFLDgyQXnR9S_U.roa (raw, json)
Hash identifier: KeNj8qqhUI9MBKiwRtkiEpWQagUORHvLN1qwjepqcQE=
Subject key identifier: 29:81:D6:B9:69:03:EE:E3:AF:B0:91:4B:0E:0C:90:5E:74:7D:4B:F5
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 018C20F2F1DD55CE7F446878C9C7E216CDAA
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/KYHWuWkD7uOvsJFLDgyQXnR9S_U.roa
Signing time: Thu 30 Nov 2023 15:57:21 +0000
ROA not before: Thu 30 Nov 2023 15:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199417
IP address blocks: 195.10.205.0/24 maxlen: 24
185.149.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 14:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:f2:f1:dd:55:ce:7f:44:68:78:c9:c7:e2:16:cd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Nov 30 15:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2981d6b96903eee3afb0914b0e0c905e747d4bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:1e:a4:da:0a:57:92:e4:7c:19:83:fd:d3:
c0:d6:02:3c:22:3f:6c:9f:15:f1:5c:29:cf:da:0b:
55:f6:03:dd:e6:90:32:96:28:53:07:f2:69:d7:e6:
70:d0:41:17:d7:d0:ab:85:10:ec:a7:77:2b:2d:b0:
41:6d:aa:d3:c8:b3:d6:70:8e:71:41:84:47:c6:04:
56:e8:3b:12:6e:d2:a5:75:14:51:2b:18:75:12:46:
83:b2:39:2b:7a:6e:51:35:b6:bb:84:65:d8:3a:c0:
7d:04:8f:a8:05:d8:a3:f6:f1:d1:cf:22:40:32:92:
c3:24:d2:dc:d7:a0:ce:32:58:33:bd:ee:57:d7:ab:
ce:8f:b8:6e:fc:a8:fb:36:2e:32:fa:0c:eb:24:23:
01:77:09:75:4d:c8:ba:0d:32:a7:92:89:6c:27:22:
13:c9:d5:8a:7e:2c:38:e8:87:42:61:e3:90:05:9f:
cf:a6:41:43:d7:b1:f7:11:e6:28:ea:41:93:ad:6e:
8f:db:30:46:4b:df:0a:b1:b8:a7:dc:7e:c5:89:2c:
e2:06:b9:15:8c:e5:3e:4c:97:bd:16:40:bf:92:c8:
c7:e6:e3:36:30:5a:da:19:ae:a6:19:3a:fc:ce:33:
b6:72:82:57:d7:6a:c6:ec:a0:bd:ba:23:f7:9d:81:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:81:D6:B9:69:03:EE:E3:AF:B0:91:4B:0E:0C:90:5E:74:7D:4B:F5
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/KYHWuWkD7uOvsJFLDgyQXnR9S_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.146.0/24
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:94:17:d1:d7:4e:de:67:10:91:bb:5a:b4:6a:07:a3:d6:46:
44:10:46:e3:66:12:95:71:c5:cf:85:dc:b7:cf:ed:4a:58:be:
ab:15:72:c9:91:9e:03:cc:94:fe:8a:cb:e9:64:27:70:17:2d:
24:a1:bb:f2:54:4c:c4:86:6a:93:39:19:88:6d:94:ac:37:15:
e8:c5:c4:c5:9a:cb:da:d7:4e:12:e1:a5:49:71:4b:04:63:12:
0b:b2:4e:14:12:b8:ac:c9:a2:6c:ce:ae:9d:b6:7d:78:79:da:
30:23:e5:73:ab:a8:c4:16:be:c8:33:4f:f1:09:be:33:ea:c4:
cc:17:81:10:c1:53:de:8a:bd:1a:44:85:e7:2d:6d:4f:f0:e7:
fa:5d:fc:ff:00:4a:1f:54:86:38:cf:69:a2:6d:ee:fc:71:8d:
fe:8f:e0:17:d9:73:6d:7e:6c:fe:d8:0d:cf:cc:ff:54:6e:05:
9b:37:88:d2:3c:cc:b9:80:9c:a2:17:4a:ef:70:ea:af:92:92:
4f:ca:71:c0:f6:c4:b4:9a:89:dc:f8:5e:9f:f8:ef:79:75:06:
2b:bb:1e:ff:6c:02:32:47:82:74:a3:0b:0e:48:2f:8f:68:02:
2e:a1:5a:80:34:b1:0f:df:e6:8b:4a:bd:82:31:c3:35:97:98:
fd:f7:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:29 2024 by rpki-client on console-ams.rpki-client.org